High severity · published Jan 28, 2025
CVE-2025-23385
In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service…
7.8
CVSS
0.1%
EPSS
No
On KEV
Description
In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DO
Dottrace · Jetbrains
before 2024.1.7; 2024.2 before 2024.2.8; 2024.3 before 2024.3.4 · source: NVD
EH
Etw Host Service · Jetbrains
before 16.43 · source: NVD
RE
Resharper · Jetbrains
before 2024.1.7; 2024.2 before 2024.2.8; 2024.3 before 2024.3.4 · source: NVD
RI
Rider · Jetbrains
before 2024.1.7; 2024.2.0 before 2024.2.8; 2024.3.0 before 2024.3.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-23385
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-23385
Vendor Advisory
https://www.jetbrains.com/privacy-security/issues-fixed/
More from Dottrace
7.0
CVE-2025-64457
In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition